Add traefik namespace selector to allow-system-egress NetworkPoli…

…cy (#681) Signed-off-by: Ian Stanton <ian@tembo.io>
tembo-io · Mar 29, 2024 · 101e2c8 · 101e2c8
1 parent 096ae01
commit 101e2c8
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 2 deletions.
diff --git a/tembo-operator/Cargo.lock b/tembo-operator/Cargo.lock
diff --git a/tembo-operator/Cargo.toml b/tembo-operator/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "controller"
 description = "Tembo Operator for Postgres"
-version = "0.43.0"
+version = "0.43.1"
 edition = "2021"
 default-run = "controller"
 license = "Apache-2.0"

diff --git a/tembo-operator/src/network_policies.rs b/tembo-operator/src/network_policies.rs
@@ -157,6 +157,27 @@ pub async fn reconcile_network_policies(client: Client, namespace: &str) -> Resu
                   }
                 }
               ]
+            },
+            {
+              "to": [
+                {
+                  "namespaceSelector": {
+                    "matchLabels": {
+                      "kubernetes.io/metadata.name": "traefik"
+                    }
+                  }
+                }
+              ],
+              "ports": [
+                {
+                  "protocol": "TCP",
+                  "port": 443
+                },
+                {
+                  "protocol": "TCP",
+                  "port": 8443
+                }
+              ]
             }
           ]
         }